''On Anonymity of Group Signatures ''
http://eprint.iacr.org/2005/422
this paper answers the question, and the result is that ACJT is fully anonymous (CCA2-secure) in ROM.
Is it right?
Since I cou
Forum: 2005 Reports